Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PzKZYqQDXBF7Lsr-W0VC_RG1Jjw.roa
File: PzKZYqQDXBF7Lsr-W0VC_RG1Jjw.roa (raw, json)
Hash identifier: 2jqOu0i09uPK8LoGCP4OYqGZ5FzB9/d6wrwcoAyenlM=
Subject key identifier: 3F:32:99:62:A4:03:5C:11:7B:2E:CA:FE:5B:45:42:FD:11:B5:26:3C
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 018CCA285DB351967A7F5F0D9000192C44F1
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PzKZYqQDXBF7Lsr-W0VC_RG1Jjw.roa
Signing time: Tue 02 Jan 2024 12:31:32 +0000
ROA not before: Tue 02 Jan 2024 12:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51426
IP address blocks: 91.217.18.0/23 maxlen: 23
46.175.112.0/21 maxlen: 21
85.209.38.0/23 maxlen: 23
185.225.108.0/22 maxlen: 22
2a0d:bc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:5d:b3:51:96:7a:7f:5f:0d:90:00:19:2c:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 12:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f329962a4035c117b2ecafe5b4542fd11b5263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:a9:4c:5a:80:fd:a0:5c:da:a8:ce:2d:94:
6f:c1:73:95:84:75:b1:d7:44:83:92:5e:eb:d2:b1:
f7:79:dd:72:62:03:3a:88:ab:14:44:d5:70:1b:26:
28:6c:37:76:80:de:2a:af:c7:2b:d4:00:53:f8:54:
49:15:4d:a4:00:80:b4:46:01:3c:47:c1:bc:dd:fd:
a5:06:31:63:18:1a:53:48:5c:bc:38:55:52:a8:ba:
21:18:d4:42:c5:69:65:15:66:93:ca:73:26:75:c3:
77:e1:5b:58:b4:de:19:06:87:b1:19:e8:95:9f:2e:
9e:11:99:c4:a7:5f:79:05:8d:0a:83:ac:5d:58:e3:
a1:82:bd:8b:ae:44:7d:5b:79:9c:af:f7:dd:6c:f0:
6b:92:f8:07:f7:fc:c9:fd:3e:c2:0a:19:ec:6f:cc:
55:6e:19:d7:ae:48:2e:2f:86:06:bd:87:8d:b4:9e:
93:1f:e6:28:a4:1c:b0:cd:04:16:89:40:f3:af:1e:
f8:16:60:a0:31:3a:e9:09:f3:0c:58:eb:8f:75:3c:
77:4d:0e:25:fa:22:9b:db:e5:2a:09:e4:00:2a:32:
68:d0:66:96:d5:ad:52:cf:7b:0d:09:e6:4f:a3:fa:
9e:15:73:54:70:b2:e0:3c:6e:1c:57:1c:c3:30:60:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:99:62:A4:03:5C:11:7B:2E:CA:FE:5B:45:42:FD:11:B5:26:3C
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PzKZYqQDXBF7Lsr-W0VC_RG1Jjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.112.0/21
85.209.38.0/23
91.217.18.0/23
185.225.108.0/22
IPv6:
2a0d:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
45:88:da:36:96:d1:da:12:dc:71:a1:57:39:80:f8:61:8e:3f:
91:0c:af:d1:f1:27:89:dd:69:0c:c0:c9:0d:03:fd:41:fe:f9:
d3:e9:40:f5:72:b9:76:1b:3e:30:43:2e:cc:b3:3a:42:75:79:
6d:68:56:e4:5a:a3:df:30:30:bf:1a:50:2a:c1:cb:1e:d1:98:
08:8c:1b:a8:7d:d9:bb:f2:60:1f:8e:f2:6e:da:12:b0:ae:b5:
9d:01:48:1a:78:c8:9d:f1:cb:9a:6b:f5:54:09:dc:d6:09:6b:
49:06:d1:3e:da:ed:be:74:f8:cd:cb:c1:ba:a6:fc:f9:16:8e:
26:e3:cd:4c:75:b6:fb:3a:bd:b5:af:64:90:cf:a2:c7:cd:71:
be:31:ab:dc:be:4f:e3:24:ff:00:65:19:47:49:54:8e:8f:b3:
43:d0:42:d5:0c:8a:02:12:5d:dd:44:f8:5f:79:53:11:9e:09:
7d:cb:aa:0b:f4:2c:57:2e:0e:16:eb:b6:3a:59:1d:0c:80:c3:
3d:7f:3c:bd:55:84:34:ac:46:47:4b:d1:89:1e:f0:8f:06:3d:
60:eb:4c:3c:09:aa:ca:e8:57:da:80:d2:6e:63:88:a6:d6:52:
54:80:42:4d:ec:6c:ca:e0:ae:78:62:ca:ff:33:a8:f5:e1:1e:
cf:43:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:19 2024 by rpki-client on console-fra.rpki-client.org